registry / twzrd-x402-gate / 0.15.0
twzrd-x402-gate@0.15.0
Buyer-side x402 trust gate: free preflight before signing USDC on Solana + Base mainnet (eip155:8453). By default no signing if preflight is down; TWZRD_FAIL_OPEN overrides. Other EVM: unscored.
AI Security Review
scanned 5d ago · by lpm-firewall-aiThe manifest has no install-time hook, and the reviewed import and command paths show no concealed automatic behavior. The npx AgentCash launch is part of the package’s explicit payment utility, whose source documents its advisory preflight limitation.
Static reason
One or more suspicious static signals were detected.; previous stored version diff introduced dangerous source
Trigger
The safe-fetch payment flow runs when a user invokes the CLI or calls its exported function.
Impact
No unauthorized collection, account action, install-time contact, or concealed execution was found in the reviewed paths.
Mechanism
It preflights a payment, then may launch AgentCash through npx; the doctor command prints integration guidance and suggested install commands.
AI rationale
The manifest has no install-time hook, and the reviewed import and command paths show no concealed automatic behavior. The npx AgentCash launch is part of the package’s explicit payment utility, whose source documents its advisory preflight limitation.
Network endpoints1
intel.twzrd.xyz/v1/intel/preflight
Decision evidence
public snapshotAI called this Clean at 94.0% confidence as Benign with low false-positive risk.
Evidence for AI clean decision
- The only lifecycle script is prepublishOnly, which runs release verification; there is no install hook.
- The safe-fetch CLI runs only when invoked as a command; its library exports do not automatically start the CLI.
- The AgentCash subprocess is part of the explicit safe-fetch payment flow, while the doctor prints suggested install commands rather than executing them.
Evidence against
- safe-fetch defaults to invoking npx with agentcash@latest after an approved preflight; its own source labels the check advisory and documents a challenge mismatch risk.
Behavioral surface
ChildProcessCryptoDynamicRequireEnvironmentVarsFilesystemNetwork
HighEntropyStringsUrlStrings
Source & flagged code
5 flaggedbin/twzrd-safe-fetch.jsView file
5*/
L6: import { spawnSync } from "node:child_process";
L7: import { existsSync } from "node:fs";
High
Child Process
Package source references child process execution.
bin/twzrd-safe-fetch.jsView on unpkg · L5bin/twzrd-gate-eval-refuse.jsView file
28const pkgRoot = join(__dirname, "..");
L29: const require = createRequire(import.meta.url);
L30:
Medium
Dynamic Require
Package source references dynamic require/import behavior.
bin/twzrd-gate-eval-refuse.jsView on unpkg · L28bin/twzrd-gate-doctor.jsView file
33// tsx resolves `src` by absolute path, so the user's cwd is safe to keep.
L34: const r = spawnSync("npx", ["--yes", "tsx", src, ...process.argv.slice(2)], {
L35: stdio: "inherit",
Findings
1 Critical3 High4 Medium5 Low
CriticalPrevious Version Dangerous Deltadist/safe-fetch.js
HighChild Processbin/twzrd-safe-fetch.js
HighRuntime Package Installbin/twzrd-gate-doctor.js
HighSemantic Analysis Limiteddist/evidence-verify.js#virtual:normalized:round1
MediumDynamic Requirebin/twzrd-gate-eval-refuse.js
MediumNetwork
MediumEnvironment Vars
MediumStructural Risk Force Deep Review
LowNon Install Lifecycle Scripts
LowScripts Present
LowFilesystem
LowHigh Entropy Strings
LowUrl Strings
Affected versions and remediation
This report applies to twzrd-x402-gate@0.15.0.
See all versions of twzrd-x402-gate for other recorded verdicts.
- Review the evidence and your use of twzrd-x402-gate@0.15.0 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.